TYPE DE FAIBLESSE

CWE-359

216 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-359 (en anglais) →

CVE-2021-46687JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifact… 4.9 MOYENNE

CVE-2022-24890Nextcloud Talk is a video and audio conferencing app for Nextcloud. In versions prior to 13.0.5 and 14.0.0, a call moderator can indirectly enable user webcams by granting permissi… 2.4 FAIBLE

CVE-2022-1365Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5. 6.5 MOYENNE

CVE-2022-24820XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list doc… 5.3 MOYENNE

CVE-2022-24819XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list doc… 5.3 MOYENNE

CVE-2022-0482Les installations d'EasyAppointments antérieures à la version 1.4.3 sont vulnérables à une faille qui expose des informations personnelles privées. Un attaquant distant non authent… 9.1 CRITIQUE

CVE-2022-24719Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `followRedirects` or `followRedirectsWith` with any of the redirection strategies built into fl… 2.6 FAIBLE

CVE-2022-0155follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor 6.5 MOYENNE

CVE-2021-36723Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the servic… 6.1 MOYENNE

CVE-2021-3980Le logiciel de réseau social Elgg est affecté par une faille qui permet à un attaquant d'accéder à des informations personnelles privées. Comme celle-ci peut être déclenchée via le… 7.5 ÉLEVÉE

CVE-2021-28559Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerabilit… 5.3 MOYENNE

CVE-2021-21823L'application mobile Komoot (versions 10.26.9 à 11.1.11) contient une faille dans sa fonctionnalité « Friend finder » qui peut exposer des informations utilisateur sensibles. Un at… 7.5 ÉLEVÉE

CVE-2021-22876curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcu… 5.3 MOYENNE

CVE-2020-1688On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted comm… 6.5 MOYENNE

CVE-2019-15623Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Looku… 5.3 MOYENNE

CVE-2017-16769Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs vi… 5.3 MOYENNE